Images of identifiable human beings can be 'personal data' under the Data Protection Act 1998 if they are taken using cameras which can be used to track individuals, which means that the obligations contained in the Act may apply to the use of CCTV. The publications available on the Information Commissioner's website www.ico.gov.uk include a Code of Conduct on the use of CCTV, which requires that any capacity for picking up conversations should be disabled, and deals with matters such as the positioning of cameras, the security of the recording media, the circumstances under which the film can be viewed, and the location and content of warning notices. You also need to notify the Information Commissioner that you are operating a CCTV system.
